Privacy Policy

Effective Date: September 18, 2025

1. Introduction

This Privacy Policy explains how Create Profile Pic ("we," "our," or "us") collects, uses, and protects your personal information when you use our AI image editing services, including our mobile application and web application at createprofilepic.com (collectively, the "Services"). We are committed to protecting your privacy and ensuring transparency about our data practices.

2. Information We Collect

2.1 Personal Information

When you use our Services, we collect the following personal information:

Account Information:

• Google account email address
• Google profile name
• Google profile picture
• Unique user identifier from Google

Device Information:

• Device type and model
• Operating system version
• App version
• Device identifiers (for analytics and crash reporting)
• IP address
• Language and region settings

Usage Information:

• Images you upload and edit
• Editing history and preferences
• Feature usage patterns
• Time spent in the app
• Error logs and crash reports

2.2 Images and Content

• Original images you upload to the Services
• Edited and AI-generated images created through our platform
• Image metadata (when available, including EXIF data)
• Text prompts and descriptions you provide for image editing
• Editing history and session data

2.3 Payment Information

• Payment processing is handled by your app store
• We do not store your credit card information
• We receive transaction confirmations and payment status from your app store
• Billing address and payment method type (for record keeping)

2.4 Analytics and Performance Data

We use Firebase Analytics and other tools to collect:

• App performance metrics
• Feature usage statistics
• Crash reports and error logs
• User engagement patterns
• A/B testing data

3. How We Use Your Information

3.1 Service Provision

• Authenticate your account using Google Sign-In
• Process and edit your images using AI technology
• Store your edited images and editing history
• Provide customer support
• Process token purchases and payments

3.2 Service Improvement

• Analyze app usage to improve features
• Fix bugs and technical issues
• Develop new features and enhancements
• Optimize app performance
• Conduct A/B testing for user experience improvements

3.3 Communication

• Send service-related notifications
• Respond to your inquiries and support requests
• Notify you about app updates or changes to our policies
• Send promotional content (with your consent)

3.4 Legal and Safety

• Comply with legal obligations
• Protect against fraud and abuse
• Enforce our Terms of Service
• Protect the rights and safety of our users

4. Information Sharing and Disclosure

4.1 Third-Party Services

We share your information with the following trusted third-party services:

Firebase (Google):

• Authentication and user management
• Cloud storage for images and data
• Analytics and crash reporting
• Push notifications

Google Sign-In:

• Account authentication
• Profile information retrieval

App Store Payments:

• Payment processing for token purchases
• Transaction management
• Fraud prevention

Cloud Storage Providers:

• Secure storage of your images
• Content delivery for app performance

4.2 Legal Requirements

We may disclose your information if required by law, regulation, or legal process, or to:

• Comply with court orders or government requests
• Protect our rights and property
• Investigate fraud or security issues
• Protect user safety

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity, subject to the same privacy protections.

5. Data Security

5.1 Security Measures

We implement industry-standard security measures to protect your information:

• Encryption of data in transit and at rest
• Secure authentication protocols
• Regular security audits and updates
• Access controls and monitoring
• Secure cloud infrastructure

5.2 Image Security

• Images are stored securely in encrypted cloud storage
• Access is restricted to authorized personnel only
• Images are processed using secure AI services
• We implement measures to prevent unauthorized access

5.3 Data Breach Response

In the event of a data breach, we will:

• Investigate and contain the breach promptly
• Notify affected users as required by law
• Take steps to prevent future breaches
• Cooperate with law enforcement if necessary

6. Data Retention

6.1 Account Data

• We retain your account information while your account is active
• Account data is deleted within 30 days of account deletion
• Some information may be retained longer for legal compliance

6.2 Images and Content

• Your images are stored as long as you maintain your account
• You can delete individual images at any time
• Images are permanently deleted within 30 days of deletion request
• Backup copies may be retained for up to 90 days for recovery purposes

6.3 Analytics Data

• Aggregated analytics data may be retained indefinitely
• Personal identifiers are removed from long-term analytics data
• Crash reports are retained for up to 2 years

7. Your Rights and Choices

7.1 Access and Control

You have the right to:

• Access your personal information
• Update or correct your information
• Delete your account and associated data
• Download your data (data portability)
• Opt out of promotional communications

7.2 Data Deletion

You can request deletion of your data by:

• Using in-app deletion options
• Contacting our support team
• Deleting your account entirely

7.3 Marketing Communications

• You can opt out of promotional emails at any time
• Service-related communications cannot be opted out of while using the App
• You can control push notification preferences in your device settings

8. Children's Privacy

8.1 Age Restrictions

• Our App is not intended for children under 13
• We do not knowingly collect information from children under 13
• If we discover we have collected information from a child under 13, we will delete it immediately

8.2 Parental Rights

If you believe your child has provided us with personal information, please contact us immediately so we can delete the information.

9. International Data Transfers

9.1 Global Services

• Our services may involve data transfers to countries outside your residence
• We ensure appropriate safeguards are in place for international transfers
• Data is processed in accordance with applicable privacy laws

9.2 Privacy Shield and Adequacy Decisions

We comply with applicable international data transfer frameworks and regulations.

10. Cookies and Tracking

10.1 Mobile App Tracking

Our mobile app may use:

• Analytics SDKs for usage tracking
• Crash reporting tools
• Performance monitoring tools
• Authentication tokens

10.2 Advertising

• We do not currently display third-party advertisements
• If we implement advertising in the future, we will update this policy
• You can control ad tracking through your device settings

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights:

• Right to know what personal information we collect
• Right to delete personal information
• Right to opt out of sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising privacy rights

To exercise these rights, contact us using the information below.

12. European Privacy Rights (GDPR)

If you are in the European Union, you have additional rights:

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

To exercise these rights, contact us using the information below.

13. Changes to This Privacy Policy

13.1 Policy Updates

• We may update this Privacy Policy from time to time
• Material changes will be communicated through the App or by email
• Continued use of the App after changes constitutes acceptance
• Previous versions will be archived and available upon request

13.2 Notification of Changes

We will provide at least 30 days' notice for material changes to this policy.

14. Contact Information

14.1 Privacy Questions

If you have questions about this Privacy Policy or our data practices, contact us at:

• Email: privacy@createprofilepic.com
• Support: exonary.build@gmail.com
• Website: https://createprofilepic.com
• Address: Available upon request for legal purposes

14.2 Data Protection Officer

For GDPR-related inquiries, you can contact our Data Protection Officer at: privacy@createprofilepic.com

14.3 Regulatory Authorities

You have the right to file a complaint with your local data protection authority if you believe we have not addressed your privacy concerns adequately.

15. Definitions

• Personal Information: Information that identifies, relates to, or could reasonably be linked with you
• Processing: Any operation performed on personal information, including collection, use, storage, and deletion
• Third Party: Any individual or entity other than you or us
• Service Providers: Third parties that process information on our behalf